CP-9(6): Redundant Secondary System

Control Family:

Contingency Planning

Parent Control:

CP-9: Information System Backup

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

PR.IP-4

Threats Addressed:

Denial of Service

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5.2.0:
CP-9(6): Redundant Secondary System

Control Statement

The organization accomplishes information system backup by maintaining a redundant secondary system that is not collocated with the primary system and that can be activated without loss of information or disruption to operations.